MFSA 2026-103Security Vulnerabilities fixed in Thunderbird 153.4
MFSA 2026-103Security Vulnerabilities fixed in Thunderbird 153.4
2026-10-02 归档
今日共收录 1399 条安全情报，包含 504 个 CVE，518 篇安全通告，以及 100 篇研究论文。
← 返回归档列表MFSA 2026-102Security Vulnerabilities fixed in Thunderbird 140.17
MFSA 2026-102Security Vulnerabilities fixed in Thunderbird 140.17
MFSA 2026-101Security Vulnerabilities fixed in Thunderbird 157
MFSA 2026-101Security Vulnerabilities fixed in Thunderbird 157
Improper limitation of a pathname to a restricted directory
CVSSv3 Score: 9.8 An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22]
关于Microsoft ExchangeServer存在多个...
关于Microsoft ExchangeServer存在多个...
关于家用路由器DNS被恶意篡改导致异常跳转风险的提示
关于家用路由器DNS被恶意篡改导致异常跳转风险的提示
Bitget Confirms Third-Party Zero-Day Behind $387.5 Million Cryptocurrency Theft
Cryptocurrency exchange Bitget on Wednesday confirmed that attackers who stole $387.5 million last week exploited a zero
Citrix NetScaler Post-Exploitation Payload Creates Superuser, Maps Web Shell to CSS-Like URLs
Threat actors have been observed exploiting a critical pre-authentication command injection vulnerability in Citrix NetS
A security vulnerability has been detected in modelcontextprotocol mcp-server-fetch and mcp...
CVE-2026-104120
A security vulnerability has been detected in modelcontextprotocol mcp-server-fetch and mcp-server-everything up to 2026
A vulnerability was determined in itsourcecode Pet Shop Management System 1.0. The affected...
CVE-2026-104052
A vulnerability was determined in itsourcecode Pet Shop Management System 1.0. The affected element is an unknown functi
Transmission of a sensitive key in the URL over an unencrypted HTTP connection. The request is...
CVE-2026-103098
Transmission of a sensitive key in the URL over an unencrypted HTTP connection. The request is sent over HTTP rather th
A vulnerability was detected in SourceCodester Online Reviewer Management System 1.0. Affected by...
CVE-2026-104123
A vulnerability was detected in SourceCodester Online Reviewer Management System 1.0. Affected by this vulnerability is
Improper access control in ManagedProvisioning prior to SMR Sep-2026 Release 1 allows local...
CVE-2026-21140
Improper access control in ManagedProvisioning prior to SMR Sep-2026 Release 1 allows local attackers to install arbitra
A vulnerability was identified in itsourcecode Pet Shop Management System 1.0. The impacted...
CVE-2026-104053
A vulnerability was identified in itsourcecode Pet Shop Management System 1.0. The impacted element is an unknown functi
A security flaw has been discovered in calcom cal.diy up to 6.2.0. This affects the function...
CVE-2026-104054
A security flaw has been discovered in calcom cal.diy up to 6.2.0. This affects the function doesUserIdHaveAccessToBooki
Office-PowerPoint-MCP-Server through 2.0.7 contains a path traversal vulnerability that allows...
CVE-2025-71427
Office-PowerPoint-MCP-Server through 2.0.7 contains a path traversal vulnerability that allows MCP callers to write and
Mooncake transfer engine through 0.3.13.post1 contains a denial of service vulnerability that...
CVE-2026-103760
Mooncake transfer engine through 0.3.13.post1 contains a denial of service vulnerability that allows unauthenticated rem
Mooncake transfer engine through 0.3.13.post1 contains a memory exhaustion vulnerability in...
CVE-2026-103761
Mooncake transfer engine through 0.3.13.post1 contains a memory exhaustion vulnerability in TransferMetadata::receivePee
ClipBucket v5 through 5.5.3-#197 contains an sql injection vulnerability that allows...
CVE-2026-103766
ClipBucket v5 through 5.5.3-#197 contains an sql injection vulnerability that allows authenticated users with ad_manager
infiniflow ragflow 0.24.0 is vulnerable to Incorrect Access Control via run_mindmap. A reachable...
CVE-2026-51894
infiniflow ragflow 0.24.0 is vulnerable to Incorrect Access Control via run_mindmap. A reachable path accepts a caller-s